CVE-2025-60311: SQL Injection
Published Oct 8, 2025
·Updated
ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page
Affected Software
2 affected components
Projectworlds Gym Management System
Projectworlds Gym Management System=1.0
Event History
Oct 8, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60311?
CVE-2025-60311 is classified as a high severity vulnerability due to the potential for SQL injection attacks.
2
How do I fix CVE-2025-60311?
To mitigate CVE-2025-60311, sanitize and validate the 'id' parameter to prevent SQL injection.
3
Which version of ProjectWorlds Gym Management System is affected by CVE-2025-60311?
CVE-2025-60311 affects version 1.0 of ProjectWorlds Gym Management System.
4
What type of vulnerability is CVE-2025-60311?
CVE-2025-60311 is an SQL Injection vulnerability.
5
Where is CVE-2025-60311 located in the software?
CVE-2025-60311 is located in the profile/edit.php page via the 'id' parameter.